get-ldger-liv-logn-x[.]pages[.]dev

PhishDestroy has identified get-ldger-liv-logn-x.pages.dev as an active brand impersonation phishing domain specifically targeting Ledger cryptocurrency hardware wallet users. The domain is currently under investigation and remains active, posing an immediate risk to individuals seeking to access legitimate Ledger services. The page title observed is "Ledger® Live — Login & Getting Started | Getting Started," designed to deceive users into entering sensitive credentials or connecting their wallets.

This domain resolves to IP address 188.114.96.3, which is hosted by Cloudflare, Inc., a common provider used by both legitimate and malicious sites. The SSL certificate is issued by Google Trust Services / WE1, providing false legitimacy. The domain was created on March 30, 2026, and is already appearing on one security blocklist. Notably, VirusTotal shows 0 detections out of 95 vendors, meaning it has not yet been flagged by major security solutions, increasing the risk of user compromise.

Given the low detection rate and active status, users are strongly advised to avoid interacting with this domain or any similar misspelled variants. Ledger customers should only access their accounts via the official domain ledger.com and ensure the URL is correct before entering any credentials or seed phrases. PhishDestroy recommends reporting this domain to hosting providers and security vendors to expedite takedown and protect potential victims.